{"id":2662,"date":"2020-11-25T09:52:23","date_gmt":"2020-11-25T17:52:23","guid":{"rendered":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png"},"modified":"2020-11-25T09:53:14","modified_gmt":"2020-11-25T17:53:14","slug":"crlite-decision-flow1","status":"inherit","type":"attachment","link":"https:\/\/blog.mozilla.org\/security\/2020\/12\/01\/crlite-part-4-infrastructure-design\/crlite-decision-flow1\/","title":{"rendered":"CRLite Decision Flow"},"author":1349,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>CRLite Decision Flow - Mozilla Security Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"J.C. Jones\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png\",\"url\":\"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png\",\"name\":\"CRLite Decision Flow - Mozilla Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\"},\"datePublished\":\"2020-11-25T17:52:23+00:00\",\"dateModified\":\"2020-11-25T17:53:14+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/security\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Design of the CRLite Infrastructure\",\"item\":\"https:\/\/blog.mozilla.org\/security\/2020\/12\/01\/crlite-part-4-infrastructure-design\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"CRLite Decision Flow\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/security\/\",\"name\":\"Mozilla Security Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CRLite Decision Flow - Mozilla Security Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png","twitter_misc":{"Written by":"J.C. Jones"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png","url":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png","name":"CRLite Decision Flow - Mozilla Security Blog","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/security\/#website"},"datePublished":"2020-11-25T17:52:23+00:00","dateModified":"2020-11-25T17:53:14+00:00","breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/security\/"},{"@type":"ListItem","position":2,"name":"Design of the CRLite Infrastructure","item":"https:\/\/blog.mozilla.org\/security\/2020\/12\/01\/crlite-part-4-infrastructure-design\/"},{"@type":"ListItem","position":3,"name":"CRLite Decision Flow"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/security\/#website","url":"https:\/\/blog.mozilla.org\/security\/","name":"Mozilla Security Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"description":{"rendered":"<p class=\"attachment\"><a href='https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png'><img loading=\"lazy\" width=\"300\" height=\"377\" src=\"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1-300x377.png\" class=\"attachment-medium size-medium\" alt=\"A representation of the CRLite Algorithm: Is this website\u2019s Certificate Authority enrolled in CRLite? If not, use the online status check, OCSP. If it is enrolled, should I expect this website\u2019s certificate to be a part of the CRLite filter available in my local profile? If it should be in the CRLite filter, does this website\u2019s certificate appear in the filter as having been revoked by its issuer? If it\u2019s not in the filter as having been revoked, does this website\u2019s certificate appear in any of my local profile\u2019s CRLite stashes as being revoked? If either the CRLite filter or the stashes indicate the website\u2019s certificate is revoked, don\u2019t trust it and show an error page. If it\u2019s not in the CRLite filter nor in the CRLite stashes as revoked, then proceed to run the rest of the Web PKI validity and trust checks. If for any reason we can\u2019t tell from the above, for example the local filters or stashes are too old or we encounter an error, then we go back to using the online status check, OCSP.\" decoding=\"async\" srcset=\"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1-300x377.png 300w, https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1-600x753.png 600w, https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1-768x964.png 768w, https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png 940w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n"},"caption":{"rendered":"<p>Figure 1: Simplified CRLite Decision Tree <a class=\"go\" href=\"https:\/\/blog.mozilla.org\/security\/2020\/12\/01\/crlite-part-4-infrastructure-design\/crlite-decision-flow1\/\">Read more<\/a><\/p>\n"},"alt_text":"A representation of the CRLite Algorithm: Is this website\u2019s Certificate Authority enrolled in CRLite? If not, use the online status check, OCSP. If it is enrolled, should I expect this website\u2019s certificate to be a part of the CRLite filter available in my local profile? If it should be in the CRLite filter, does this website\u2019s certificate appear in the filter as having been revoked by its issuer? If it\u2019s not in the filter as having been revoked, does this website\u2019s certificate appear in any of my local profile\u2019s CRLite stashes as being revoked? If either the CRLite filter or the stashes indicate the website\u2019s certificate is revoked, don\u2019t trust it and show an error page. If it\u2019s not in the CRLite filter nor in the CRLite stashes as revoked, then proceed to run the rest of the Web PKI validity and trust checks. If for any reason we can\u2019t tell from the above, for example the local filters or stashes are too old or we encounter an error, then we go back to using the online status check, OCSP.","media_type":"image","mime_type":"image\/png","media_details":{"width":940,"height":1180,"file":"2020\/12\/CRLite-Decision-Flow1.png","sizes":{"medium":{"file":"CRLite-Decision-Flow1-300x377.png","width":300,"height":377,"mime_type":"image\/png","source_url":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1-300x377.png"},"large":{"file":"CRLite-Decision-Flow1-600x753.png","width":600,"height":753,"mime_type":"image\/png","source_url":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1-600x753.png"},"thumbnail":{"file":"CRLite-Decision-Flow1-150x150.png","width":150,"height":150,"mime_type":"image\/png","source_url":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1-150x150.png"},"medium_large":{"file":"CRLite-Decision-Flow1-768x964.png","width":768,"height":964,"mime_type":"image\/png","source_url":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1-768x964.png"},"post-full-size":{"file":"CRLite-Decision-Flow1-940x770.png","width":940,"height":770,"mime_type":"image\/png","source_url":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1-940x770.png"},"post-large":{"file":"CRLite-Decision-Flow1-600x330.png","width":600,"height":330,"mime_type":"image\/png","source_url":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1-600x330.png"},"post-thumbnail":{"file":"CRLite-Decision-Flow1-300x165.png","width":300,"height":165,"mime_type":"image\/png","source_url":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1-300x165.png"},"full":{"file":"CRLite-Decision-Flow1.png","width":940,"height":1180,"mime_type":"image\/png","source_url":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png"}},"image_meta":{"aperture":"0","credit":"","camera":"","caption":"","created_timestamp":"0","copyright":"","focal_length":"0","iso":"0","shutter_speed":"0","title":"","orientation":"0","keywords":[]}},"post":2656,"source_url":"https:\/\/blog.mozilla.org\/security\/files\/2020\/12\/CRLite-Decision-Flow1.png","_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/media\/2662"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/media"}],"about":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/types\/attachment"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/users\/1349"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/comments?post=2662"}]}}